strapi-plugin-oidc 1.0.8 → 1.0.10

package/dist/admin/{index-Cz9Q6j4e.mjs → index-BADTLgSt.mjs}

@@ -54,7 +54,7 @@ const index = {
           defaultMessage: "Configuration"
         },
         Component: async () => {
-          return await import("./index-V4-lA3hu.mjs");
+          return await import("./index-CINLwPy3.mjs");
         },
         permissions: [{ action: "plugin::strapi-plugin-oidc.read", subject: null }]
       }
@@ -79,9 +79,12 @@ const index = {
             const interceptHistory = (originalMethod) => {
               return function(...args) {
                 const url = args[2];
-                if (url && typeof url === "string" && url.endsWith("/auth/login")) {
-                  window.location.href = "/strapi-plugin-oidc/oidc";
-                  return;
+                if (url && typeof url === "string") {
+                  const urlWithoutQuery = url.split("?")[0].split("#")[0];
+                  if (urlWithoutQuery.endsWith("/auth/login")) {
+                    window.location.href = "/strapi-plugin-oidc/oidc";
+                    return;
+                  }
                 }
                 return originalMethod.apply(window.history, args);
               };

package/dist/admin/{index-DNIqscJT.js → index-C762D8BZ.js}

@@ -7,7 +7,7 @@ const react = require("react");
 const designSystem = require("@strapi/design-system");
 const icons = require("@strapi/icons");
 const reactIntl = require("react-intl");
-const index = require("./index-Bc2bQNhu.js");
+const index = require("./index-Cq1ERJUV.js");
 const en = require("./en-8UlbiAHW.js");
 const styled = require("styled-components");
 const _interopDefault = (e) => e && e.__esModule ? e : { default: e };

package/dist/admin/{index-V4-lA3hu.mjs → index-CINLwPy3.mjs}

@@ -5,7 +5,7 @@ import { useState, useCallback, useEffect, memo } from "react";
 import { Typography, Flex, Box, MultiSelect, MultiSelectOption, Field, Button, Divider, Thead, Tr, Th, Tbody, Td, Dialog, IconButton, Pagination, PreviousLink, PageLink, NextLink, Table, Alert } from "@strapi/design-system";
 import { Plus, Trash, WarningCircle } from "@strapi/icons";
 import { useIntl } from "react-intl";
-import { p as pluginId } from "./index-Cz9Q6j4e.mjs";
+import { p as pluginId } from "./index-BADTLgSt.mjs";
 import en from "./en-DInn-mdh.mjs";
 import styled from "styled-components";
 function getTrad(id) {

package/dist/admin/{index-Bc2bQNhu.js → index-Cq1ERJUV.js}

@@ -55,7 +55,7 @@ const index = {
           defaultMessage: "Configuration"
         },
         Component: async () => {
-          return await Promise.resolve().then(() => require("./index-DNIqscJT.js"));
+          return await Promise.resolve().then(() => require("./index-C762D8BZ.js"));
         },
         permissions: [{ action: "plugin::strapi-plugin-oidc.read", subject: null }]
       }
@@ -80,9 +80,12 @@ const index = {
             const interceptHistory = (originalMethod) => {
               return function(...args) {
                 const url = args[2];
-                if (url && typeof url === "string" && url.endsWith("/auth/login")) {
-                  window.location.href = "/strapi-plugin-oidc/oidc";
-                  return;
+                if (url && typeof url === "string") {
+                  const urlWithoutQuery = url.split("?")[0].split("#")[0];
+                  if (urlWithoutQuery.endsWith("/auth/login")) {
+                    window.location.href = "/strapi-plugin-oidc/oidc";
+                    return;
+                  }
                 }
                 return originalMethod.apply(window.history, args);
               };

package/dist/admin/index.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const index = require("./index-Bc2bQNhu.js");
+const index = require("./index-Cq1ERJUV.js");
 exports.default = index.index;

package/dist/admin/index.mjs

@@ -1,4 +1,4 @@
-import { i } from "./index-Cz9Q6j4e.mjs";
+import { i } from "./index-BADTLgSt.mjs";
 export {
   i as default
 };

package/dist/server/index.js

@@ -11,6 +11,30 @@ const generator__default = /* @__PURE__ */ _interopDefault(generator);
 function register$1() {
 }
 async function bootstrap({ strapi: strapi2 }) {
+  strapi2.server.use(async (ctx, next) => {
+    if (ctx.request.path === "/admin/login" && ctx.request.method === "POST") {
+      try {
+        const whitelistService2 = strapi2.plugin("strapi-plugin-oidc").service("whitelist");
+        const settings = await whitelistService2.getSettings();
+        if (settings && settings.enforceOIDC) {
+          ctx.status = 403;
+          ctx.body = {
+            data: null,
+            error: {
+              status: 403,
+              name: "ForbiddenError",
+              message: "Local login is disabled. Please use OIDC.",
+              details: {}
+            }
+          };
+          return;
+        }
+      } catch (err) {
+        strapi2.log.error("Error checking OIDC enforcement in middleware:", err);
+      }
+    }
+    await next();
+  });
   const actions = [
     {
       section: "plugins",
@@ -481,7 +505,7 @@ const routes = [
     handler: "oidc.oidcSignIn",
     config: {
       auth: false,
-      middlewares: [rateLimitMiddleware]
+      middlewares: [rateLimitMiddleware, "strapi::session"]
     }
   },
   {
@@ -490,7 +514,7 @@ const routes = [
     handler: "oidc.oidcSignInCallback",
     config: {
       auth: false,
-      middlewares: [rateLimitMiddleware]
+      middlewares: [rateLimitMiddleware, "strapi::session"]
     }
   },
   {

package/dist/server/index.mjs

@@ -5,6 +5,30 @@ import generator from "generate-password";
 function register$1() {
 }
 async function bootstrap({ strapi: strapi2 }) {
+  strapi2.server.use(async (ctx, next) => {
+    if (ctx.request.path === "/admin/login" && ctx.request.method === "POST") {
+      try {
+        const whitelistService2 = strapi2.plugin("strapi-plugin-oidc").service("whitelist");
+        const settings = await whitelistService2.getSettings();
+        if (settings && settings.enforceOIDC) {
+          ctx.status = 403;
+          ctx.body = {
+            data: null,
+            error: {
+              status: 403,
+              name: "ForbiddenError",
+              message: "Local login is disabled. Please use OIDC.",
+              details: {}
+            }
+          };
+          return;
+        }
+      } catch (err) {
+        strapi2.log.error("Error checking OIDC enforcement in middleware:", err);
+      }
+    }
+    await next();
+  });
   const actions = [
     {
       section: "plugins",
@@ -475,7 +499,7 @@ const routes = [
     handler: "oidc.oidcSignIn",
     config: {
       auth: false,
-      middlewares: [rateLimitMiddleware]
+      middlewares: [rateLimitMiddleware, "strapi::session"]
     }
   },
   {
@@ -484,7 +508,7 @@ const routes = [
     handler: "oidc.oidcSignInCallback",
     config: {
       auth: false,
-      middlewares: [rateLimitMiddleware]
+      middlewares: [rateLimitMiddleware, "strapi::session"]
     }
   },
   {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "strapi-plugin-oidc",
-  "version": "1.0.8",
+  "version": "1.0.10",
   "description": "A Strapi plugin that provides OpenID Connect (OIDC) authentication functionality for the Strapi Admin Panel.",
   "strapi": {
     "displayName": "OIDC Plugin",
@@ -63,8 +63,8 @@
     }
   ],
   "engines": {
-    "node": ">=20.0.0 <=24.x.x",
-    "npm": ">=6.0.0"
+    "node": ">=22.0.0 <=22.x.x",
+    "npm": "10.x.x"
   },
   "files": [
     "dist"